{"vulnerability": "cve-2026-4803", "sightings": [{"uuid": "4fbc344a-e44b-466b-9316-387ea4b54c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrtsqnnwdl2t", "content": "CVE-2026-48030: Critical OS Command Injection in Pheditor (2.0.1-2.0.4). Authenticated users can execute arbitrary OS commands. Patch to 2.0.6 or apply mitigations. #CyberSecurity #PatchNow", "creation_timestamp": "2026-07-30T06:28:15.743675Z"}, {"uuid": "ac308d13-9fdc-4ec1-af9a-3473a95f90df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3mihu7ej2k", "content": "CVE-2026-4803 - Royal Addons for Elementor\nCVE ID : CVE-2026-4803\n \n Published : May 5, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wpr_...", "creation_timestamp": "2026-05-05T07:01:14.137366Z"}, {"uuid": "585c927f-d555-4829-b972-c0a4f70c57e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4803", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3ml4ug6xfg62c", "content": "CVE-2026-4803: XSS en Royal Elementor Addons\n\nCVE-2026-4803 afecta Royal Elementor Addons hasta v1.7.1056 con XSS almacenado sin autenticaci\u00f3n. Conoc\u00e9 el exploit, versiones vulnerables y c\u00f3mo parche...\n\n#cve20264803 #royalelementoraddons #xsswordpress #vulnerabilidadesplugins", "creation_timestamp": "2026-05-05T18:55:47.723046Z"}, {"uuid": "9a85801f-0415-4930-b37e-fbc7e7e09c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48031", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7bnbfowl2p", "content": "CVE-2026-48031 - dhax\nThe Go Restful API Boilerplate contains a security flaw where the JWT secret is hardcoded as 'random', allowing attackers to forge tokens. This affects developers who use the boilerplate,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dhax #Golang #CVE #infosec", "creation_timestamp": "2026-08-03T19:54:04.623794Z"}, {"uuid": "d2f6e973-08f8-49dd-b9d3-657f13d7bc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48039", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msk3ddwnin2e", "content": "CRITICAL: CVE-2026-48039 in meta-ads-mcp (<1.0.109) lets attackers invoke MCP tools & leak access tokens \u2014 no auth needed. Upgrade to 1.0.109+ now. https://radar.offseq.com/threat/cve-2026-48039-cwe-287-improper-authentication-in-pipeboard-co-meta-ads-mcp-cda3b9551f498ab7 #OffSeq #vulnerability #...", "creation_timestamp": "2026-08-08T03:00:26.853175Z"}, {"uuid": "cbfe2c8d-465e-49b8-8f60-0a85be6eb693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msk3dk3c572w", "content": "\ud83d\udd34 CVE-2026-48039 - Critical (9.1)\n\nMeta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48039/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T03:00:33.281265Z"}, {"uuid": "72a816e4-87c7-4045-92cb-7c4b085d6c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "Telegram/mMN-AjvGpcaE-zo6q0YmV9Qj204A53PE-cWPysE2p8vK_VY", "content": "", "creation_timestamp": "2026-05-28T11:00:13.000000Z"}, {"uuid": "c8c079a0-f4dc-4ac4-baee-1ed3fd52038c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48030", "type": "published-proof-of-concept", "source": "https://github.com/pheditor/pheditor/security/advisories/GHSA-jvc5-6g7q-c843", "content": "", "creation_timestamp": "2026-05-20T13:11:25.000000Z"}, {"uuid": "a0754228-d47a-489a-aa9b-744bb92cafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48031", "type": "published-proof-of-concept", "source": "https://github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm", "content": "", "creation_timestamp": "2026-05-20T15:11:45.000000Z"}, {"uuid": "7e5c3c4d-00dc-41c4-ac58-f7eaae8aef4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48039", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-9gw6-46qc-99vr", "content": "", "creation_timestamp": "2026-06-11T13:28:29.000000Z"}, {"uuid": "4bebbc9d-0f6a-4163-bc08-1642cbcae4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnlhuodhd2a", "content": "CVE-2026-48030 - pheditor\nAn attacker can execute arbitrary OS commands on a Pheditor server by injecting malicious characters into the 'dir' parameter in the terminal handler. This allows the attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pheditor #composer #CVE #infosec", "creation_timestamp": "2026-07-27T19:02:05.330935Z"}, {"uuid": "1ca40f25-946e-4101-9019-28e606934496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrntuzuwmz2a", "content": "CVE-2026-48030 - Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)\nCVE ID : CVE-2026-48030\n \n Published : July 27, 2026, 6:16 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Pheditor is a single-file editor and file manager written in ...", "creation_timestamp": "2026-07-27T21:32:37.142996Z"}]}